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Answer: D 


QUESTION: 51 
What must be configured on the FWSM to forward traffic to a filtering server? 


A. the filtering server as an authentication provider (aaa-server) 

B. all web traffic so that it is directed only to the filtering server (access-list) 

C. all HTTP requests so that they are redirected to the filtering server (fixup protocol) 
D. all HTTP requests so that they are sent to the filtering server (url-server) 


Answer: D 
QUESTION: 52 


How many IDSMs can be aggregated using a single EtherChannel in a highly available 
configuration? 


Answer: C 


QUESTION: 53 
Refer to the exhibit. 
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Given this network design, which command would you use to configure traffic capture on 
the IDSM? 


A. monitor session 1 source vlan 10 
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B. monitor session | source vlan 20 
C. intrusion-detection module 5 data-port 1 access-vlan 10 
D. intrusion-detection module 5 data-port 1 access-vlan 20 


Answer: A 


QUESTION: 54 
How do you enable the use of Cisco Adaptive Security Device Manager on an existing 
FWSM? 


A. Enable SNMP. 

B. Enable SSH. 

C. Enable the HTTPS server. 
D. Enable multiple contexts. 


Answer: C 


QUESTION: 55 
What is the implication of executing the command failover interface-policy 2 on an 
FWSM? 


A. The configured failover interface policy will be applied to VLAN 2. 

B. The FWSM will fail over when more than one VLAN interface fails. 

C. The second configured failover interface policy will be applied to the FWSM. 

D. The FWSM will become active when it tails to receive two consecutive heartbeats from 
the paired FWSM. 


Answer: B 


QUESTION: 56 
Which three values are user-configurable for risk ratings on the IDSM? (Choose three.) 


A. Target Value Rating 

B. Signature Age Rating 
C. Alert Reliability Rating 
D. Attack Severity Rating 
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E. Signature Fidelity Rating 
F. Attack Probability Rating 


Answer: A, D, E 


QUESTION: 57 
Refer to the exhibit. 
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Given this network design, which command would you use to configure traffic capture on 
the IDSM? 


A. monitor session | source vlan 10 
B. monitor session | source vlan 20 
C. intrusion-detection module 5 data-port 1 access-vlan 30 
D. intrusion-detection module 5 data-port 1 access-vlan 20 


Answer: D 


QUESTION: 58 
What information is displayed when you execute this command on the IDSM? 
show settings 


A. the management IP address 

B. the IDSM interface configuration 

C. the VLANs that are configured for traffic capture 

D. the VLANs that are configured for management access 


Answer: A 
QUESTION: 59 


A POP3 and an SMTP server must be visible at the same address through an FWSM. 
Which type of NAT is required? 
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A. dynamic NAT 

B. identity NAT 

C. policy dynamic NAT 
D. static NAT 


Answer: D 


QUESTION: 60 
How many capture files can be stored on an IDSM? 
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